Skip to content

mixed栈，私密空间关闭导致SFA断网 #2693

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
4 of 5 tasks
oppressor1761 opened this issue Mar 11, 2025 · 5 comments
Closed
4 of 5 tasks

mixed栈，私密空间关闭导致SFA断网 #2693

oppressor1761 opened this issue Mar 11, 2025 · 5 comments
Labels
Stale

Comments

@oppressor1761
Copy link

oppressor1761 commented Mar 11, 2025 •
edited
Loading

操作系统

Android

系统版本

BP1A.250305.019 (GrapheneOS 2025031400)

安装类型

sing-box for Android 图形客户端程序

如果您使用图形客户端程序，请提供该程序版本。

1.11.5

版本



描述


同时在主空间和私密空间使用 SFA，并同时使用 屏蔽未使用VPN的所有连接 。关闭私密空间后，主空间无法联网。


重现方式


    

  1. 在主空间和私密空间中安装SFA。使用相同的配置文件，不启用配置覆盖。不启用Android提供的私人DNS。
    2. 

  2. 在两个空间中启用SFA并均打开屏蔽未使用VPN的所有连接
    3. 

  3. 在主空间和私密空间中测试，以确保两者都可以联网
    4. 

  4. 锁定私密空间
    5. 



结果：锁定私密空间后，主空间无法连接到Internet，无法访问任何网页。

配置文件如下


{
    "log": {
        "disabled": false,
        "level": "trace",
        "timestamp": true,
    "output": "box.log"
    },
    "experimental": {
        "cache_file": {
            "enabled": true,
            "store_rdrc": true,
            "store_fakeip": true
        }
    },
    "dns": {
        "servers": [
            {"address": "quic://223.5.5.5:853","detour": "direct","tag": "dns_direct" }
        ],
        "rules": [
            {
                "outbound": "any",
                "server": "dns_direct",
                "action": "route"
            }
        ],
        "disable_cache": false,
        "disable_expire": false,
        "independent_cache": true,
        "reverse_mapping": true
    },
    "inbounds": [
        {
            "auto_route": true,
            "auto_redirect": false,
            "endpoint_independent_nat": false,
            "mtu": 1350,
            "stack": "mixed",
            "type": "tun",
            "tag": "tun-in",
            "address": [
                "172.18.0.1/30",
                "fdfe:dcba:9876::1/126"
            ]
        }
    ],
    "outbounds": [
        {
            "tag": "direct",
            "type": "direct"
        }
    ],
    "route": {
        "auto_detect_interface": true,
        "override_android_vpn": false,
        "rules": [
            {
                "action": "sniff"
            },
            {
                "type": "logical",
                "mode": "or",
                "rules": [
                    {
                        "protocol": "dns"
                    },
                    {
                        "port": 53
                    }
                ],
                "action": "hijack-dns"
            }
        ]
    }
}




日志


22:46分在主空间进行了到baidu.com的访问，结果正常。22:47分关闭了私密空间，之后再次在主空间访问baidu.com，无法访问。


+0800 2025-03-11 22:46:40 INFO network: updated available networks: rmnet1 (cellular, expensive), tun1 (cellular, expensive)
+0800 2025-03-11 22:46:40 INFO network: updated default interface rmnet1, index 15, type cellular, expensive
+0800 2025-03-11 22:46:40 TRACE inbound/tun[tun-in]: creating stack
+0800 2025-03-11 22:46:40 INFO inbound/tun[tun-in]: started at tun0
+0800 2025-03-11 22:46:40 INFO sing-box started (0.111s)
+0800 2025-03-11 22:46:40 INFO [708145079 0ms] inbound/tun[tun-in]: inbound packet connection from 172.18.0.1:42444
+0800 2025-03-11 22:46:40 INFO [708145079 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0800 2025-03-11 22:46:40 INFO [1780893394 0ms] inbound/tun[tun-in]: inbound packet connection from 172.18.0.1:48603
+0800 2025-03-11 22:46:40 DEBUG [708145079 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:40 DEBUG [708145079 0ms] router: sniffed packet protocol: dns
+0800 2025-03-11 22:46:40 INFO [1780893394 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0800 2025-03-11 22:46:40 DEBUG [708145079 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0800 2025-03-11 22:46:40 DEBUG [1780893394 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:40 DEBUG [708145079 0ms] dns: exchange mtalk.google.com. IN A via dns_direct
+0800 2025-03-11 22:46:40 INFO outbound/direct[direct]: outbound packet connection to 223.5.5.5:853
+0800 2025-03-11 22:46:40 DEBUG [1780893394 0ms] router: sniffed packet protocol: dns
+0800 2025-03-11 22:46:40 DEBUG [1780893394 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0800 2025-03-11 22:46:40 DEBUG [1780893394 0ms] dns: exchange mtalk.google.com. IN AAAA via dns_direct
+0800 2025-03-11 22:46:40 INFO [3034568767 0ms] inbound/tun[tun-in]: inbound connection from 172.18.0.1:56008
+0800 2025-03-11 22:46:40 INFO [3034568767 0ms] inbound/tun[tun-in]: inbound connection to 157.255.191.46:80
+0800 2025-03-11 22:46:40 DEBUG [3034568767 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:40 DEBUG [3034568767 6ms] router: sniffed protocol: http, domain: szextshort.weixin.qq.com
+0800 2025-03-11 22:46:40 INFO [3034568767 7ms] outbound/direct[direct]: outbound connection to 157.255.191.46:80
+0800 2025-03-11 22:46:40 DEBUG [708145079 130ms] dns: exchanged mtalk.google.com NOERROR 179
+0800 2025-03-11 22:46:40 INFO [708145079 130ms] dns: exchanged CNAME mtalk.google.com. 179 IN CNAME mobile-gtalk.l.google.com.
+0800 2025-03-11 22:46:40 INFO [708145079 130ms] dns: exchanged A mobile-gtalk.l.google.com. 179 IN A 142.251.188.188
+0800 2025-03-11 22:46:40 DEBUG [1780893394 130ms] dns: exchanged mtalk.google.com NOERROR 35
+0800 2025-03-11 22:46:40 INFO [1780893394 130ms] dns: exchanged CNAME mtalk.google.com. 35 IN CNAME mobile-gtalk.l.google.com.
+0800 2025-03-11 22:46:40 DEBUG router: found reserve mapped domain: mobile-gtalk.l.google.com
+0800 2025-03-11 22:46:40 INFO [4185568685 0ms] inbound/tun[tun-in]: inbound connection from 172.18.0.1:35790
+0800 2025-03-11 22:46:40 INFO [4185568685 0ms] inbound/tun[tun-in]: inbound connection to 142.251.188.188:5228
+0800 2025-03-11 22:46:40 DEBUG [4185568685 0ms] router: found reserve mapped domain: mobile-gtalk.l.google.com
+0800 2025-03-11 22:46:40 DEBUG [4185568685 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:40 DEBUG [4185568685 1ms] router: sniffed protocol: tls, domain: mtalk.google.com
+0800 2025-03-11 22:46:40 INFO [4185568685 1ms] outbound/direct[direct]: outbound connection to 142.251.188.188:5228
+0800 2025-03-11 22:46:41 DEBUG [3034568767 388ms] connection: connection download finished
+0800 2025-03-11 22:46:41 DEBUG [3034568767 413ms] connection: connection upload finished
+0800 2025-03-11 22:46:42 INFO [1398927497 2ms] inbound/tun[tun-in]: inbound connection from 172.18.0.1:47930
+0800 2025-03-11 22:46:42 INFO [1398927497 3ms] inbound/tun[tun-in]: inbound connection to 157.148.59.238:443
+0800 2025-03-11 22:46:42 DEBUG [1398927497 3ms] router: match[0] => sniff
+0800 2025-03-11 22:46:42 INFO [1398927497 305ms] outbound/direct[direct]: outbound connection to 157.148.59.238:443
+0800 2025-03-11 22:46:47 INFO [4256979809 0ms] inbound/tun[tun-in]: inbound packet connection from 172.18.0.1:62218
+0800 2025-03-11 22:46:47 INFO [4256979809 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0800 2025-03-11 22:46:47 DEBUG [4256979809 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:47 DEBUG [4256979809 0ms] router: sniffed packet protocol: dns
+0800 2025-03-11 22:46:47 DEBUG [4256979809 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0800 2025-03-11 22:46:47 DEBUG [4256979809 1ms] dns: exchange www.baidu.com. IN AAAA via dns_direct
+0800 2025-03-11 22:46:47 INFO [3837534288 0ms] inbound/tun[tun-in]: inbound packet connection from 172.18.0.1:53450
+0800 2025-03-11 22:46:47 INFO [3837534288 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0800 2025-03-11 22:46:47 DEBUG [3837534288 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:47 DEBUG [3837534288 0ms] router: sniffed packet protocol: dns
+0800 2025-03-11 22:46:47 DEBUG [3837534288 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0800 2025-03-11 22:46:47 DEBUG [3837534288 0ms] dns: exchange www.baidu.com. IN A via dns_direct
+0800 2025-03-11 22:46:47 INFO [3881779769 0ms] inbound/tun[tun-in]: inbound packet connection from 172.18.0.1:14645
+0800 2025-03-11 22:46:47 INFO [3881779769 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0800 2025-03-11 22:46:47 DEBUG [3881779769 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:47 DEBUG [3881779769 0ms] router: sniffed packet protocol: dns
+0800 2025-03-11 22:46:47 DEBUG [3881779769 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0800 2025-03-11 22:46:47 DEBUG [3881779769 0ms] dns: exchange www.baidu.com. IN HTTPS via dns_direct
+0800 2025-03-11 22:46:47 DEBUG [4256979809 67ms] dns: exchanged www.baidu.com NOERROR 75
+0800 2025-03-11 22:46:47 INFO [4256979809 68ms] dns: exchanged CNAME www.baidu.com. 75 IN CNAME www.a.shifen.com.
+0800 2025-03-11 22:46:47 INFO [4256979809 68ms] dns: exchanged AAAA www.a.shifen.com. 75 IN AAAA 2408:873d:22:1a91:0:ff:b013:cf81
+0800 2025-03-11 22:46:47 INFO [4256979809 68ms] dns: exchanged AAAA www.a.shifen.com. 75 IN AAAA 2408:873d:22:18cb:0:ff:b037:e6d8
+0800 2025-03-11 22:46:47 DEBUG [3837534288 70ms] dns: exchanged www.baidu.com NOERROR 13
+0800 2025-03-11 22:46:47 DEBUG [3881779769 69ms] dns: exchanged www.baidu.com NOERROR 152
+0800 2025-03-11 22:46:47 INFO [3837534288 70ms] dns: exchanged CNAME www.baidu.com. 13 IN CNAME www.a.shifen.com.
+0800 2025-03-11 22:46:47 INFO [3881779769 69ms] dns: exchanged CNAME www.baidu.com. 152 IN CNAME www.a.shifen.com.
+0800 2025-03-11 22:46:47 INFO [3837534288 70ms] dns: exchanged A www.a.shifen.com. 13 IN A 153.3.238.28
+0800 2025-03-11 22:46:47 INFO [3837534288 70ms] dns: exchanged A www.a.shifen.com. 13 IN A 153.3.238.127
+0800 2025-03-11 22:46:47 DEBUG router: found reserve mapped domain: www.a.shifen.com
+0800 2025-03-11 22:46:47 INFO [2060136822 0ms] inbound/tun[tun-in]: inbound connection from [fdfe:dcba:9876::1]:51122
+0800 2025-03-11 22:46:47 INFO [2060136822 0ms] inbound/tun[tun-in]: inbound connection to [2408:873d:22:1a91:0:ff:b013:cf81]:443
+0800 2025-03-11 22:46:47 DEBUG [2060136822 0ms] router: found reserve mapped domain: www.a.shifen.com
+0800 2025-03-11 22:46:47 DEBUG [2060136822 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:47 DEBUG [2060136822 8ms] router: sniffed protocol: tls, domain: www.baidu.com
+0800 2025-03-11 22:46:47 INFO [2060136822 9ms] outbound/direct[direct]: outbound connection to [2408:873d:22:1a91:0:ff:b013:cf81]:443
+0800 2025-03-11 22:46:48 INFO [2658613642 0ms] inbound/tun[tun-in]: inbound packet connection from 172.18.0.1:31263
+0800 2025-03-11 22:46:48 INFO [2658613642 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0800 2025-03-11 22:46:48 DEBUG [2658613642 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:48 DEBUG [2658613642 0ms] router: sniffed packet protocol: dns
+0800 2025-03-11 22:46:48 DEBUG [2658613642 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0800 2025-03-11 22:46:48 DEBUG [2658613642 0ms] dns: exchange b.bdstatic.com. IN AAAA via dns_direct
+0800 2025-03-11 22:46:48 INFO [3714181977 0ms] inbound/tun[tun-in]: inbound packet connection from 172.18.0.1:14720
+0800 2025-03-11 22:46:48 INFO [3714181977 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0800 2025-03-11 22:46:48 DEBUG [3714181977 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:48 DEBUG [3714181977 0ms] router: sniffed packet protocol: dns
+0800 2025-03-11 22:46:48 DEBUG [3714181977 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0800 2025-03-11 22:46:48 INFO [1719327559 0ms] inbound/tun[tun-in]: inbound packet connection from 172.18.0.1:23364
+0800 2025-03-11 22:46:48 DEBUG [3714181977 0ms] dns: exchange b.bdstatic.com. IN A via dns_direct
+0800 2025-03-11 22:46:48 INFO [1719327559 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0800 2025-03-11 22:46:48 DEBUG [1719327559 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:48 DEBUG [1719327559 0ms] router: sniffed packet protocol: dns
+0800 2025-03-11 22:46:48 DEBUG [1719327559 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0800 2025-03-11 22:46:48 DEBUG [1719327559 1ms] dns: exchange b.bdstatic.com. IN HTTPS via dns_direct
+0800 2025-03-11 22:46:48 INFO [3013331982 0ms] inbound/tun[tun-in]: inbound packet connection from 172.18.0.1:17904
+0800 2025-03-11 22:46:48 INFO [1710056103 0ms] inbound/tun[tun-in]: inbound packet connection from 172.18.0.1:26319
+0800 2025-03-11 22:46:48 INFO [3013331982 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0800 2025-03-11 22:46:48 INFO [1710056103 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0800 2025-03-11 22:46:48 DEBUG [1710056103 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:48 DEBUG [1710056103 0ms] router: sniffed packet protocol: dns
+0800 2025-03-11 22:46:48 DEBUG [1710056103 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0800 2025-03-11 22:46:48 DEBUG [1710056103 0ms] dns: exchange t10.baidu.com. IN A via dns_direct
+0800 2025-03-11 22:46:48 DEBUG [3013331982 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:48 INFO [2027528014 0ms] inbound/tun[tun-in]: inbound packet connection from 172.18.0.1:52382
+0800 2025-03-11 22:46:48 INFO [2027528014 1ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0800 2025-03-11 22:46:48 DEBUG [2027528014 2ms] router: match[0] => sniff
+0800 2025-03-11 22:46:48 DEBUG [3013331982 2ms] router: sniffed packet protocol: dns
+0800 2025-03-11 22:46:48 DEBUG [2027528014 2ms] router: sniffed packet protocol: dns
+0800 2025-03-11 22:46:48 DEBUG [3013331982 2ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0800 2025-03-11 22:46:48 DEBUG [2027528014 2ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0800 2025-03-11 22:46:48 DEBUG [3013331982 2ms] dns: exchange t10.baidu.com. IN HTTPS via dns_direct
+0800 2025-03-11 22:46:48 DEBUG [2027528014 2ms] dns: exchange t10.baidu.com. IN AAAA via dns_direct
+0800 2025-03-11 22:46:48 INFO [3534280020 0ms] inbound/tun[tun-in]: inbound packet connection from 172.18.0.1:24845
+0800 2025-03-11 22:46:48 INFO [3534280020 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0800 2025-03-11 22:46:48 DEBUG [3534280020 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:48 DEBUG [3534280020 0ms] router: sniffed packet protocol: dns
+0800 2025-03-11 22:46:48 DEBUG [3534280020 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0800 2025-03-11 22:46:48 DEBUG [3534280020 0ms] dns: exchange t11.baidu.com. IN AAAA via dns_direct
+0800 2025-03-11 22:46:48 INFO [1794940444 0ms] inbound/tun[tun-in]: inbound packet connection from 172.18.0.1:8460
+0800 2025-03-11 22:46:48 INFO [1794940444 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0800 2025-03-11 22:46:48 DEBUG [1794940444 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:48 DEBUG [1794940444 0ms] router: sniffed packet protocol: dns
+0800 2025-03-11 22:46:48 DEBUG [1794940444 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0800 2025-03-11 22:46:48 DEBUG [1794940444 0ms] dns: exchange t11.baidu.com. IN A via dns_direct
+0800 2025-03-11 22:46:48 INFO [2927644153 0ms] inbound/tun[tun-in]: inbound packet connection from 172.18.0.1:6288
+0800 2025-03-11 22:46:48 INFO [2927644153 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0800 2025-03-11 22:46:48 DEBUG [2927644153 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:48 DEBUG [2927644153 0ms] router: sniffed packet protocol: dns
+0800 2025-03-11 22:46:48 DEBUG [2927644153 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0800 2025-03-11 22:46:48 DEBUG [2927644153 0ms] dns: exchange t11.baidu.com. IN HTTPS via dns_direct
+0800 2025-03-11 22:46:48 DEBUG [1794940444 34ms] dns: exchanged t11.baidu.com NOERROR 39
+0800 2025-03-11 22:46:48 DEBUG [2027528014 39ms] dns: exchanged t10.baidu.com NOERROR 3
+0800 2025-03-11 22:46:48 DEBUG [1710056103 38ms] dns: exchanged t10.baidu.com NOERROR 1
+0800 2025-03-11 22:46:48 INFO [2027528014 39ms] dns: exchanged CNAME t10.baidu.com. 3 IN CNAME t10.baidu.com.a.bdydns.com.
+0800 2025-03-11 22:46:48 INFO [2027528014 39ms] dns: exchanged CNAME t10.baidu.com.a.bdydns.com. 3 IN CNAME opencdnbdsimage.jomodns.com.
+0800 2025-03-11 22:46:48 INFO [2027528014 39ms] dns: exchanged AAAA opencdnbdsimage.jomodns.com. 3 IN AAAA 2408:870c:1040:1::d35f:2224
+0800 2025-03-11 22:46:48 INFO [1710056103 39ms] dns: exchanged CNAME t10.baidu.com. 1 IN CNAME t10.baidu.com.a.bdydns.com.
+0800 2025-03-11 22:46:48 INFO [1710056103 39ms] dns: exchanged CNAME t10.baidu.com.a.bdydns.com. 1 IN CNAME opencdnbdsimage.jomodns.com.
+0800 2025-03-11 22:46:48 INFO [1794940444 34ms] dns: exchanged CNAME t11.baidu.com. 39 IN CNAME t11.baidu.com.a.bdydns.com.
+0800 2025-03-11 22:46:48 INFO [1710056103 40ms] dns: exchanged A opencdnbdsimage.jomodns.com. 1 IN A 211.95.34.36
+0800 2025-03-11 22:46:48 INFO [1794940444 35ms] dns: exchanged CNAME t11.baidu.com.a.bdydns.com. 39 IN CNAME opencdnbdsimage.jomodns.com.
+0800 2025-03-11 22:46:48 INFO [1794940444 35ms] dns: exchanged A opencdnbdsimage.jomodns.com. 39 IN A 211.95.34.36
+0800 2025-03-11 22:46:48 DEBUG [3534280020 37ms] dns: exchanged t11.baidu.com NOERROR 1
+0800 2025-03-11 22:46:48 INFO [3534280020 37ms] dns: exchanged CNAME t11.baidu.com. 1 IN CNAME t11.baidu.com.a.bdydns.com.
+0800 2025-03-11 22:46:48 INFO [3534280020 37ms] dns: exchanged CNAME t11.baidu.com.a.bdydns.com. 1 IN CNAME opencdnbdsimage.jomodns.com.
+0800 2025-03-11 22:46:48 INFO [3534280020 37ms] dns: exchanged AAAA opencdnbdsimage.jomodns.com. 1 IN AAAA 2408:870c:1040:1::d35f:2224
+0800 2025-03-11 22:46:48 DEBUG [2927644153 35ms] dns: exchanged t11.baidu.com NOERROR 1
+0800 2025-03-11 22:46:48 DEBUG [2658613642 60ms] dns: exchanged b.bdstatic.com NOERROR 13
+0800 2025-03-11 22:46:48 INFO [2658613642 60ms] dns: exchanged CNAME b.bdstatic.com. 13 IN CNAME bcstobos.jomodns.com.
+0800 2025-03-11 22:46:48 DEBUG [1719327559 58ms] dns: exchanged b.bdstatic.com NOERROR 128
+0800 2025-03-11 22:46:48 INFO [2658613642 60ms] dns: exchanged AAAA bcstobos.jomodns.com. 13 IN AAAA 2408:873c:b010:1001::7054:2230
+0800 2025-03-11 22:46:48 INFO [1719327559 59ms] dns: exchanged CNAME b.bdstatic.com. 128 IN CNAME bcstobos.jomodns.com.
+0800 2025-03-11 22:46:48 INFO [2927644153 35ms] dns: exchanged CNAME t11.baidu.com. 1 IN CNAME t11.baidu.com.a.bdydns.com.
+0800 2025-03-11 22:46:48 DEBUG [3714181977 60ms] dns: exchanged b.bdstatic.com NOERROR 55
+0800 2025-03-11 22:46:48 DEBUG [3013331982 41ms] dns: exchanged t10.baidu.com NOERROR 10
+0800 2025-03-11 22:46:48 INFO [3714181977 60ms] dns: exchanged CNAME b.bdstatic.com. 55 IN CNAME bcstobos.jomodns.com.
+0800 2025-03-11 22:46:48 INFO [3013331982 41ms] dns: exchanged CNAME t10.baidu.com. 10 IN CNAME t10.baidu.com.a.bdydns.com.
+0800 2025-03-11 22:46:48 INFO [3714181977 60ms] dns: exchanged A bcstobos.jomodns.com. 55 IN A 112.84.34.48
+0800 2025-03-11 22:46:48 INFO [3013331982 42ms] dns: exchanged CNAME t10.baidu.com.a.bdydns.com. 10 IN CNAME opencdnbdsimage.jomodns.com.
+0800 2025-03-11 22:46:48 INFO [2927644153 37ms] dns: exchanged CNAME t11.baidu.com.a.bdydns.com. 1 IN CNAME opencdnbdsimage.jomodns.com.
+0800 2025-03-11 22:46:48 DEBUG router: found reserve mapped domain: bcstobos.jomodns.com
+0800 2025-03-11 22:46:48 INFO [4085416964 0ms] inbound/tun[tun-in]: inbound connection from [fdfe:dcba:9876::1]:50314
+0800 2025-03-11 22:46:48 INFO [4085416964 0ms] inbound/tun[tun-in]: inbound connection to [2408:873c:b010:1001::7054:2230]:443
+0800 2025-03-11 22:46:48 DEBUG [4085416964 0ms] router: found reserve mapped domain: bcstobos.jomodns.com
+0800 2025-03-11 22:46:48 DEBUG [4085416964 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:48 DEBUG router: found reserve mapped domain: opencdnbdsimage.jomodns.com
+0800 2025-03-11 22:46:48 DEBUG [4085416964 6ms] router: sniffed protocol: tls, domain: b.bdstatic.com
+0800 2025-03-11 22:46:48 INFO [4085416964 6ms] outbound/direct[direct]: outbound connection to [2408:873c:b010:1001::7054:2230]:443
+0800 2025-03-11 22:46:48 INFO [2348482299 0ms] inbound/tun[tun-in]: inbound connection from [fdfe:dcba:9876::1]:45908
+0800 2025-03-11 22:46:48 INFO [2348482299 0ms] inbound/tun[tun-in]: inbound connection to [2408:870c:1040:1::d35f:2224]:443
+0800 2025-03-11 22:46:48 DEBUG [2348482299 0ms] router: found reserve mapped domain: opencdnbdsimage.jomodns.com
+0800 2025-03-11 22:46:48 DEBUG [2348482299 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:48 DEBUG router: found reserve mapped domain: opencdnbdsimage.jomodns.com
+0800 2025-03-11 22:46:48 DEBUG [2348482299 6ms] router: sniffed protocol: tls, domain: t10.baidu.com
+0800 2025-03-11 22:46:48 INFO [3182046527 0ms] inbound/tun[tun-in]: inbound connection from [fdfe:dcba:9876::1]:45912
+0800 2025-03-11 22:46:48 INFO [2348482299 6ms] outbound/direct[direct]: outbound connection to [2408:870c:1040:1::d35f:2224]:443
+0800 2025-03-11 22:46:48 INFO [3182046527 0ms] inbound/tun[tun-in]: inbound connection to [2408:870c:1040:1::d35f:2224]:443
+0800 2025-03-11 22:46:48 DEBUG [3182046527 0ms] router: found reserve mapped domain: opencdnbdsimage.jomodns.com
+0800 2025-03-11 22:46:48 DEBUG [3182046527 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:48 DEBUG router: found reserve mapped domain: opencdnbdsimage.jomodns.com
+0800 2025-03-11 22:46:48 INFO [5351998 0ms] inbound/tun[tun-in]: inbound connection from [fdfe:dcba:9876::1]:45916
+0800 2025-03-11 22:46:48 INFO [5351998 0ms] inbound/tun[tun-in]: inbound connection to [2408:870c:1040:1::d35f:2224]:443
+0800 2025-03-11 22:46:48 DEBUG [5351998 0ms] router: found reserve mapped domain: opencdnbdsimage.jomodns.com
+0800 2025-03-11 22:46:48 DEBUG [5351998 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:48 DEBUG [3182046527 6ms] router: sniffed protocol: tls, domain: t10.baidu.com
+0800 2025-03-11 22:46:48 INFO [3182046527 6ms] outbound/direct[direct]: outbound connection to [2408:870c:1040:1::d35f:2224]:443
+0800 2025-03-11 22:46:48 DEBUG [5351998 5ms] router: sniffed protocol: tls, domain: t10.baidu.com
+0800 2025-03-11 22:46:48 INFO [5351998 6ms] outbound/direct[direct]: outbound connection to [2408:870c:1040:1::d35f:2224]:443
+0800 2025-03-11 22:46:48 DEBUG router: found reserve mapped domain: opencdnbdsimage.jomodns.com
+0800 2025-03-11 22:46:48 INFO [3385956114 0ms] inbound/tun[tun-in]: inbound connection from [fdfe:dcba:9876::1]:45930
+0800 2025-03-11 22:46:48 INFO [3385956114 0ms] inbound/tun[tun-in]: inbound connection to [2408:870c:1040:1::d35f:2224]:443
+0800 2025-03-11 22:46:48 DEBUG [3385956114 0ms] router: found reserve mapped domain: opencdnbdsimage.jomodns.com
+0800 2025-03-11 22:46:48 DEBUG [3385956114 1ms] router: match[0] => sniff
+0800 2025-03-11 22:46:48 DEBUG [3385956114 1ms] router: sniffed protocol: tls, domain: t11.baidu.com
+0800 2025-03-11 22:46:48 INFO [3385956114 2ms] outbound/direct[direct]: outbound connection to [2408:870c:1040:1::d35f:2224]:443
+0800 2025-03-11 22:46:48 INFO [539556819 0ms] inbound/tun[tun-in]: inbound packet connection from 172.18.0.1:44537
+0800 2025-03-11 22:46:48 INFO [539556819 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0800 2025-03-11 22:46:48 DEBUG [539556819 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:48 DEBUG [539556819 0ms] router: sniffed packet protocol: dns
+0800 2025-03-11 22:46:48 DEBUG [539556819 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0800 2025-03-11 22:46:48 DEBUG [539556819 0ms] dns: exchange m.baidu.com. IN AAAA via dns_direct
+0800 2025-03-11 22:46:48 INFO [908158897 0ms] inbound/tun[tun-in]: inbound packet connection from 172.18.0.1:43904
+0800 2025-03-11 22:46:48 INFO [908158897 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0800 2025-03-11 22:46:48 DEBUG [908158897 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:48 DEBUG [908158897 0ms] router: sniffed packet protocol: dns
+0800 2025-03-11 22:46:48 DEBUG [908158897 1ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0800 2025-03-11 22:46:48 INFO [2630216927 0ms] inbound/tun[tun-in]: inbound packet connection from 172.18.0.1:7058
+0800 2025-03-11 22:46:48 INFO [2630216927 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0800 2025-03-11 22:46:48 DEBUG [908158897 1ms] dns: exchange m.baidu.com. IN A via dns_direct
+0800 2025-03-11 22:46:48 DEBUG [2630216927 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:48 DEBUG [2630216927 0ms] router: sniffed packet protocol: dns
+0800 2025-03-11 22:46:48 DEBUG [2630216927 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0800 2025-03-11 22:46:48 DEBUG [2630216927 0ms] dns: exchange m.baidu.com. IN HTTPS via dns_direct
+0800 2025-03-11 22:46:48 DEBUG [908158897 30ms] dns: exchanged m.baidu.com NOERROR 10
+0800 2025-03-11 22:46:48 DEBUG [539556819 32ms] dns: exchanged m.baidu.com NOERROR 1
+0800 2025-03-11 22:46:48 INFO [908158897 30ms] dns: exchanged CNAME m.baidu.com. 10 IN CNAME wap.n.shifen.com.
+0800 2025-03-11 22:46:48 INFO [539556819 32ms] dns: exchanged CNAME m.baidu.com. 1 IN CNAME wap.n.shifen.com.
+0800 2025-03-11 22:46:48 INFO [908158897 30ms] dns: exchanged A wap.n.shifen.com. 10 IN A 153.3.237.241
+0800 2025-03-11 22:46:48 INFO [539556819 33ms] dns: exchanged AAAA wap.n.shifen.com. 1 IN AAAA 2408:873d:22:1957:0:ff:b01b:9760
+0800 2025-03-11 22:46:48 INFO [908158897 30ms] dns: exchanged A wap.n.shifen.com. 10 IN A 153.3.238.223
+0800 2025-03-11 22:46:48 INFO [539556819 33ms] dns: exchanged AAAA wap.n.shifen.com. 1 IN AAAA 2408:873d:22:18d8:0:ff:b05d:3ed4
+0800 2025-03-11 22:46:48 DEBUG [2630216927 37ms] dns: exchanged m.baidu.com NOERROR 1
+0800 2025-03-11 22:46:48 INFO [2630216927 37ms] dns: exchanged CNAME m.baidu.com. 1 IN CNAME wap.n.shifen.com.
+0800 2025-03-11 22:46:48 DEBUG router: found reserve mapped domain: wap.n.shifen.com
+0800 2025-03-11 22:46:48 INFO [348636168 0ms] inbound/tun[tun-in]: inbound connection from [fdfe:dcba:9876::1]:56384
+0800 2025-03-11 22:46:48 INFO [348636168 0ms] inbound/tun[tun-in]: inbound connection to [2408:873d:22:1957:0:ff:b01b:9760]:443
+0800 2025-03-11 22:46:48 DEBUG [348636168 0ms] router: found reserve mapped domain: wap.n.shifen.com
+0800 2025-03-11 22:46:48 DEBUG [348636168 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:48 DEBUG [348636168 1ms] router: sniffed protocol: tls, domain: m.baidu.com
+0800 2025-03-11 22:46:48 INFO [348636168 1ms] outbound/direct[direct]: outbound connection to [2408:873d:22:1957:0:ff:b01b:9760]:443
+0800 2025-03-11 22:46:49 INFO [3148175293 0ms] inbound/tun[tun-in]: inbound packet connection from 172.18.0.1:6814
+0800 2025-03-11 22:46:49 INFO [3148175293 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0800 2025-03-11 22:46:49 DEBUG [3148175293 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:49 DEBUG [3148175293 0ms] router: sniffed packet protocol: dns
+0800 2025-03-11 22:46:49 DEBUG [3148175293 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0800 2025-03-11 22:46:49 DEBUG [3148175293 0ms] dns: exchange drive-api.proton.me. IN AAAA via dns_direct
+0800 2025-03-11 22:46:49 INFO [603817672 0ms] inbound/tun[tun-in]: inbound packet connection from 172.18.0.1:32095
+0800 2025-03-11 22:46:49 INFO [603817672 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0800 2025-03-11 22:46:49 DEBUG [603817672 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:49 DEBUG [603817672 2ms] router: sniffed packet protocol: dns
+0800 2025-03-11 22:46:49 DEBUG [603817672 3ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0800 2025-03-11 22:46:49 DEBUG [603817672 3ms] dns: exchange drive-api.proton.me. IN A via dns_direct
+0800 2025-03-11 22:46:49 DEBUG [603817672 59ms] dns: exchanged drive-api.proton.me NOERROR 1
+0800 2025-03-11 22:46:49 INFO [603817672 60ms] dns: exchanged A drive-api.proton.me. 1 IN A 199.16.156.103
+0800 2025-03-11 22:46:49 DEBUG [3148175293 92ms] dns: exchanged drive-api.proton.me NOERROR 74
+0800 2025-03-11 22:46:49 INFO [3148175293 93ms] dns: exchanged AAAA drive-api.proton.me. 74 IN AAAA 2a03:2880:f12c:183:face:b00c:0:25de
+0800 2025-03-11 22:46:49 DEBUG router: found reserve mapped domain: drive-api.proton.me
+0800 2025-03-11 22:46:49 INFO [787311045 0ms] inbound/tun[tun-in]: inbound connection from 172.18.0.1:57644
+0800 2025-03-11 22:46:49 INFO [787311045 0ms] inbound/tun[tun-in]: inbound connection to 199.16.156.103:443
+0800 2025-03-11 22:46:49 DEBUG [787311045 0ms] router: found reserve mapped domain: drive-api.proton.me
+0800 2025-03-11 22:46:49 DEBUG [787311045 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:49 DEBUG [787311045 4ms] router: sniffed protocol: tls, domain: drive-api.proton.me
+0800 2025-03-11 22:46:49 INFO [787311045 4ms] outbound/direct[direct]: outbound connection to 199.16.156.103:443
+0800 2025-03-11 22:46:49 INFO [2570313175 0ms] inbound/tun[tun-in]: inbound packet connection from 172.18.0.1:26037
+0800 2025-03-11 22:46:49 INFO [2570313175 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0800 2025-03-11 22:46:49 DEBUG [2570313175 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:49 DEBUG [2570313175 0ms] router: sniffed packet protocol: dns
+0800 2025-03-11 22:46:49 DEBUG [2570313175 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0800 2025-03-11 22:46:49 DEBUG [2570313175 1ms] dns: exchange hpd.baidu.com. IN AAAA via dns_direct
+0800 2025-03-11 22:46:49 INFO [897639508 0ms] inbound/tun[tun-in]: inbound packet connection from 172.18.0.1:50038
+0800 2025-03-11 22:46:49 INFO [897639508 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0800 2025-03-11 22:46:49 DEBUG [897639508 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:49 DEBUG [897639508 0ms] router: sniffed packet protocol: dns
+0800 2025-03-11 22:46:49 DEBUG [897639508 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0800 2025-03-11 22:46:49 DEBUG [897639508 0ms] dns: exchange hpd.baidu.com. IN A via dns_direct
+0800 2025-03-11 22:46:49 INFO [3349061712 0ms] inbound/tun[tun-in]: inbound packet connection from 172.18.0.1:30795
+0800 2025-03-11 22:46:49 INFO [3349061712 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0800 2025-03-11 22:46:49 DEBUG [3349061712 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:49 DEBUG [3349061712 0ms] router: sniffed packet protocol: dns
+0800 2025-03-11 22:46:49 DEBUG [3349061712 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0800 2025-03-11 22:46:49 DEBUG [3349061712 0ms] dns: exchange hpd.baidu.com. IN HTTPS via dns_direct
+0800 2025-03-11 22:46:49 DEBUG [897639508 25ms] dns: exchanged hpd.baidu.com NOERROR 53
+0800 2025-03-11 22:46:49 DEBUG [2570313175 27ms] dns: exchanged hpd.baidu.com NOERROR 43
+0800 2025-03-11 22:46:49 INFO [2570313175 27ms] dns: exchanged CNAME hpd.baidu.com. 43 IN CNAME hpd.a.shifen.com.
+0800 2025-03-11 22:46:49 INFO [2570313175 27ms] dns: exchanged AAAA hpd.a.shifen.com. 43 IN AAAA 2408:873d:1022:1f74:0:ff:b0d0:9783
+0800 2025-03-11 22:46:49 INFO [897639508 26ms] dns: exchanged CNAME hpd.baidu.com. 53 IN CNAME hpd.a.shifen.com.
+0800 2025-03-11 22:46:49 INFO [897639508 26ms] dns: exchanged A hpd.a.shifen.com. 53 IN A 103.211.221.207
+0800 2025-03-11 22:46:49 DEBUG router: found reserve mapped domain: hpd.a.shifen.com
+0800 2025-03-11 22:46:49 DEBUG [3349061712 35ms] dns: exchanged hpd.baidu.com NOERROR 1
+0800 2025-03-11 22:46:49 INFO [3349061712 35ms] dns: exchanged CNAME hpd.baidu.com. 1 IN CNAME hpd.a.shifen.com.
+0800 2025-03-11 22:46:49 INFO [2248087901 0ms] inbound/tun[tun-in]: inbound connection from [fdfe:dcba:9876::1]:32850
+0800 2025-03-11 22:46:49 INFO [2248087901 0ms] inbound/tun[tun-in]: inbound connection to [2408:873d:1022:1f74:0:ff:b0d0:9783]:443
+0800 2025-03-11 22:46:49 DEBUG [2248087901 0ms] router: found reserve mapped domain: hpd.a.shifen.com
+0800 2025-03-11 22:46:49 DEBUG [2248087901 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:49 DEBUG [2248087901 5ms] router: sniffed protocol: tls, domain: hpd.baidu.com
+0800 2025-03-11 22:46:49 INFO [2248087901 5ms] outbound/direct[direct]: outbound connection to [2408:873d:1022:1f74:0:ff:b0d0:9783]:443
+0800 2025-03-11 22:46:50 DEBUG [348636168 1.73s] connection: connection upload finished
+0800 2025-03-11 22:46:50 DEBUG [2348482299 2.1s] connection: connection upload finished
+0800 2025-03-11 22:46:50 DEBUG [5351998 2.1s] connection: connection upload finished
+0800 2025-03-11 22:46:50 DEBUG [3182046527 2.1s] connection: connection upload finished
+0800 2025-03-11 22:46:50 DEBUG [2060136822 3.10s] connection: connection upload finished
+0800 2025-03-11 22:46:50 DEBUG [4085416964 2.2s] connection: connection upload finished
+0800 2025-03-11 22:46:50 DEBUG [3385956114 2.2s] connection: connection upload finished
+0800 2025-03-11 22:46:50 DEBUG [5351998 2.4s] connection: connection download finished
+0800 2025-03-11 22:46:50 DEBUG [2348482299 2.4s] connection: connection download finished
+0800 2025-03-11 22:46:50 DEBUG [3182046527 2.4s] connection: connection download finished
+0800 2025-03-11 22:46:50 DEBUG [2060136822 3.13s] connection: connection download finished
+0800 2025-03-11 22:46:50 DEBUG [348636168 1.76s] connection: connection download finished
+0800 2025-03-11 22:46:50 DEBUG [4085416964 2.6s] connection: connection download finished
+0800 2025-03-11 22:46:50 DEBUG [3385956114 2.4s] connection: connection download finished
+0800 2025-03-11 22:46:50 DEBUG [2248087901 1.19s] connection: connection upload finished
+0800 2025-03-11 22:46:50 INFO [1766624138 0ms] inbound/tun[tun-in]: inbound packet connection from 172.18.0.1:19601
+0800 2025-03-11 22:46:50 INFO [1766624138 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0800 2025-03-11 22:46:50 DEBUG [1766624138 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:50 DEBUG [1766624138 0ms] router: sniffed packet protocol: dns
+0800 2025-03-11 22:46:50 DEBUG [1766624138 1ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0800 2025-03-11 22:46:50 DEBUG [1766624138 1ms] dns: exchange m.baidu.com. IN AAAA via dns_direct
+0800 2025-03-11 22:46:50 INFO [2279792646 0ms] inbound/tun[tun-in]: inbound packet connection from 172.18.0.1:2427
+0800 2025-03-11 22:46:50 INFO [2279792646 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0800 2025-03-11 22:46:50 DEBUG [2279792646 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:50 DEBUG [2279792646 0ms] router: sniffed packet protocol: dns
+0800 2025-03-11 22:46:50 DEBUG [2279792646 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0800 2025-03-11 22:46:50 DEBUG [2279792646 0ms] dns: exchange m.baidu.com. IN A via dns_direct
+0800 2025-03-11 22:46:50 DEBUG [2279792646 1ms] dns: cached m.baidu.com NOERROR 8
+0800 2025-03-11 22:46:50 INFO [2279792646 1ms] dns: cached CNAME m.baidu.com. 8 IN CNAME wap.n.shifen.com.
+0800 2025-03-11 22:46:50 INFO [2279792646 1ms] dns: cached A wap.n.shifen.com. 8 IN A 153.3.237.241
+0800 2025-03-11 22:46:50 INFO [2279792646 1ms] dns: cached A wap.n.shifen.com. 8 IN A 153.3.238.223
+0800 2025-03-11 22:46:50 INFO [3853432500 0ms] inbound/tun[tun-in]: inbound packet connection from 172.18.0.1:16761
+0800 2025-03-11 22:46:50 INFO [3853432500 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0800 2025-03-11 22:46:50 DEBUG [3853432500 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:50 DEBUG [3853432500 0ms] router: sniffed packet protocol: dns
+0800 2025-03-11 22:46:50 DEBUG [3853432500 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0800 2025-03-11 22:46:50 DEBUG [3853432500 0ms] dns: exchange m.baidu.com. IN HTTPS via dns_direct
+0800 2025-03-11 22:46:50 DEBUG [2248087901 1.25s] connection: connection download finished
+0800 2025-03-11 22:46:50 DEBUG [1766624138 79ms] dns: exchanged m.baidu.com NOERROR 112
+0800 2025-03-11 22:46:50 DEBUG [3853432500 74ms] dns: exchanged m.baidu.com NOERROR 40
+0800 2025-03-11 22:46:50 INFO [3853432500 75ms] dns: exchanged CNAME m.baidu.com. 40 IN CNAME wap.n.shifen.com.
+0800 2025-03-11 22:46:50 INFO [1766624138 80ms] dns: exchanged CNAME m.baidu.com. 112 IN CNAME wap.n.shifen.com.
+0800 2025-03-11 22:46:50 INFO [1766624138 80ms] dns: exchanged AAAA wap.n.shifen.com. 112 IN AAAA 2408:873d:22:18d8:0:ff:b05d:3ed4
+0800 2025-03-11 22:46:50 INFO [1766624138 80ms] dns: exchanged AAAA wap.n.shifen.com. 112 IN AAAA 2408:873d:22:1957:0:ff:b01b:9760
+0800 2025-03-11 22:46:50 DEBUG router: found reserve mapped domain: wap.n.shifen.com
+0800 2025-03-11 22:46:50 INFO [499188682 0ms] inbound/tun[tun-in]: inbound connection from [fdfe:dcba:9876::1]:39378
+0800 2025-03-11 22:46:50 INFO [499188682 0ms] inbound/tun[tun-in]: inbound connection to [2408:873d:22:18d8:0:ff:b05d:3ed4]:443
+0800 2025-03-11 22:46:50 DEBUG [499188682 0ms] router: found reserve mapped domain: wap.n.shifen.com
+0800 2025-03-11 22:46:50 DEBUG [499188682 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:50 DEBUG [499188682 5ms] router: sniffed protocol: tls, domain: m.baidu.com
+0800 2025-03-11 22:46:50 INFO [499188682 6ms] outbound/direct[direct]: outbound connection to [2408:873d:22:18d8:0:ff:b05d:3ed4]:443
+0800 2025-03-11 22:46:51 DEBUG router: found reserve mapped domain: drive-api.proton.me
+0800 2025-03-11 22:46:51 INFO [4029359121 0ms] inbound/tun[tun-in]: inbound connection from 172.18.0.1:57654
+0800 2025-03-11 22:46:51 INFO [4029359121 0ms] inbound/tun[tun-in]: inbound connection to 199.16.156.103:443
+0800 2025-03-11 22:46:51 DEBUG [4029359121 0ms] router: found reserve mapped domain: drive-api.proton.me
+0800 2025-03-11 22:46:51 DEBUG [4029359121 0ms] router: match[0] => sniff
+0800 2025-03-11 22:46:51 DEBUG [4029359121 8ms] router: sniffed protocol: tls, domain: drive-api.proton.me
+0800 2025-03-11 22:46:51 INFO [4029359121 9ms] outbound/direct[direct]: outbound connection to 199.16.156.103:443
+0800 2025-03-11 22:46:54 ERROR [787311045 5.0s] connection: open outbound connection: dial rmnet1 (15): dial tcp 199.16.156.103:443: i/o timeout
+0800 2025-03-11 22:46:54 DEBUG router: found reserve mapped domain: drive-api.proton.me
+0800 2025-03-11 22:46:54 INFO [391102490 0ms] inbound/tun[tun-in]: inbound connection from [fdfe:dcba:9876::1]:36826
+0800 2025-03-11 22:46:54 INFO [391102490 0ms] inbound/tun[tun-in]: inbound connection to [2a03:2880:f12c:183:face:b00c:0:25de]:443
+0800 2025-03-11 22:46:54 DEBUG [391102490 0ms] router: found reserve mapped domain: drive-api.proton.me
+0800 2025-03-11 22:46:54 DEBUG [391102490 1ms] router: match[0] => sniff
+0800 2025-03-11 22:46:54 DEBUG [391102490 10ms] router: sniffed protocol: tls, domain: drive-api.proton.me
+0800 2025-03-11 22:46:54 INFO [391102490 11ms] outbound/direct[direct]: outbound connection to [2a03:2880:f12c:183:face:b00c:0:25de]:443
+0800 2025-03-11 22:46:55 TRACE [499188682 4.73s] connection: connection upload closed
+0800 2025-03-11 22:46:55 TRACE [499188682 4.73s] connection: connection download closed
+0800 2025-03-11 22:46:56 ERROR [4029359121 5.1s] connection: open outbound connection: dial rmnet1 (15): dial tcp 199.16.156.103:443: i/o timeout
+0800 2025-03-11 22:46:56 DEBUG router: found reserve mapped domain: drive-api.proton.me
+0800 2025-03-11 22:46:56 INFO [1325631904 0ms] inbound/tun[tun-in]: inbound connection from [fdfe:dcba:9876::1]:46166
+0800 2025-03-11 22:46:56 INFO [1325631904 1ms] inbound/tun[tun-in]: inbound connection to [2a03:2880:f12c:183:face:b00c:0:25de]:443
+0800 2025-03-11 22:46:56 DEBUG [1325631904 2ms] router: found reserve mapped domain: drive-api.proton.me
+0800 2025-03-11 22:46:56 DEBUG [1325631904 3ms] router: match[0] => sniff
+0800 2025-03-11 22:46:56 DEBUG [1325631904 21ms] router: sniffed protocol: tls, domain: drive-api.proton.me
+0800 2025-03-11 22:46:56 INFO [1325631904 22ms] outbound/direct[direct]: outbound connection to [2a03:2880:f12c:183:face:b00c:0:25de]:443
+0800 2025-03-11 22:46:59 ERROR [391102490 5.1s] connection: open outbound connection: dial rmnet1 (15): dial tcp [2a03:2880:f12c:183:face:b00c:0:25de]:443: i/o timeout
+0800 2025-03-11 22:47:00 INFO [1105987098 0ms] inbound/tun[tun-in]: inbound packet connection from 172.18.0.1:1333
+0800 2025-03-11 22:47:00 INFO [1105987098 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0800 2025-03-11 22:47:00 DEBUG [1105987098 0ms] router: match[0] => sniff
+0800 2025-03-11 22:47:00 DEBUG [1105987098 0ms] router: sniffed packet protocol: dns
+0800 2025-03-11 22:47:00 DEBUG [1105987098 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0800 2025-03-11 22:47:00 DEBUG [1105987098 0ms] dns: exchange drive-api.proton.me. IN A via dns_direct
+0800 2025-03-11 22:47:00 DEBUG [1105987098 56ms] dns: exchanged drive-api.proton.me NOERROR 110
+0800 2025-03-11 22:47:00 INFO [1105987098 57ms] dns: exchanged A drive-api.proton.me. 110 IN A 192.133.77.189
+0800 2025-03-11 22:47:00 DEBUG router: found reserve mapped domain: drive-api.proton.me
+0800 2025-03-11 22:47:00 INFO [2390563704 0ms] inbound/tun[tun-in]: inbound connection from 172.18.0.1:40636
+0800 2025-03-11 22:47:00 INFO [2390563704 0ms] inbound/tun[tun-in]: inbound connection to 192.133.77.189:443
+0800 2025-03-11 22:47:00 DEBUG [2390563704 1ms] router: found reserve mapped domain: drive-api.proton.me
+0800 2025-03-11 22:47:00 DEBUG [2390563704 1ms] router: match[0] => sniff
+0800 2025-03-11 22:47:00 DEBUG [2390563704 29ms] router: sniffed protocol: tls, domain: drive-api.proton.me
+0800 2025-03-11 22:47:00 INFO [2390563704 30ms] outbound/direct[direct]: outbound connection to 192.133.77.189:443
+0800 2025-03-11 22:47:01 TRACE [1398927497 18.78s] connection: connection download closed
+0800 2025-03-11 22:47:01 ERROR [1398927497 18.78s] connection: connection upload closed: splice read: software caused connection abort
+0800 2025-03-11 22:47:01 TRACE [4185568685 20.16s] connection: connection download closed
+0800 2025-03-11 22:47:01 ERROR [4185568685 20.16s] connection: connection upload closed: splice read: software caused connection abort
+0800 2025-03-11 22:47:01 ERROR [1325631904 5.2s] connection: open outbound connection: dial rmnet1 (15): dial tcp [2a03:2880:f12c:183:face:b00c:0:25de]:443: i/o timeout
+0800 2025-03-11 22:47:01 DEBUG router: found reserve mapped domain: drive-api.proton.me
+0800 2025-03-11 22:47:03 DEBUG router: found reserve mapped domain: drive-api.proton.me
+0800 2025-03-11 22:47:03 DEBUG router: found reserve mapped domain: drive-api.proton.me
+0800 2025-03-11 22:47:05 ERROR [2390563704 5.3s] connection: open outbound connection: dial rmnet1 (15): dial tcp 192.133.77.189:443: i/o timeout
+0800 2025-03-11 22:47:06 DEBUG router: found reserve mapped domain: mobile-gtalk.l.google.com
+0800 2025-03-11 22:47:08 INFO [1453727737 0ms] inbound/tun[tun-in]: inbound packet connection from 172.18.0.1:47929
+0800 2025-03-11 22:47:08 INFO [1453727737 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0800 2025-03-11 22:47:08 DEBUG [1453727737 0ms] router: match[0] => sniff
+0800 2025-03-11 22:47:08 DEBUG [1453727737 1ms] router: sniffed packet protocol: dns
+0800 2025-03-11 22:47:08 DEBUG [1453727737 1ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0800 2025-03-11 22:47:08 DEBUG [1453727737 2ms] dns: exchange www.baidu.com. IN AAAA via dns_direct
+0800 2025-03-11 22:47:08 DEBUG [1453727737 2ms] dns: cached www.baidu.com NOERROR 54
+0800 2025-03-11 22:47:08 INFO [1453727737 3ms] dns: cached CNAME www.baidu.com. 54 IN CNAME www.a.shifen.com.
+0800 2025-03-11 22:47:08 INFO [4178135301 0ms] inbound/tun[tun-in]: inbound packet connection from 172.18.0.1:46238
+0800 2025-03-11 22:47:08 INFO [4178135301 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0800 2025-03-11 22:47:08 DEBUG [4178135301 0ms] router: match[0] => sniff
+0800 2025-03-11 22:47:08 DEBUG [4178135301 0ms] router: sniffed packet protocol: dns
+0800 2025-03-11 22:47:08 DEBUG [4178135301 1ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0800 2025-03-11 22:47:08 DEBUG [4178135301 1ms] dns: exchange www.baidu.com. IN A via dns_direct
+0800 2025-03-11 22:47:08 INFO [2570989116 0ms] inbound/tun[tun-in]: inbound packet connection from 172.18.0.1:34230
+0800 2025-03-11 22:47:08 INFO [2570989116 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0800 2025-03-11 22:47:08 DEBUG [2570989116 0ms] router: match[0] => sniff
+0800 2025-03-11 22:47:08 DEBUG [2570989116 0ms] router: sniffed packet protocol: dns
+0800 2025-03-11 22:47:08 DEBUG [2570989116 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0800 2025-03-11 22:47:08 DEBUG [2570989116 0ms] dns: exchange www.baidu.com. IN HTTPS via dns_direct
+0800 2025-03-11 22:47:08 DEBUG [2570989116 0ms] dns: cached www.baidu.com NOERROR 131
+0800 2025-03-11 22:47:08 INFO [2570989116 0ms] dns: cached CNAME www.baidu.com. 131 IN CNAME www.a.shifen.com.
+0800 2025-03-11 22:47:08 INFO [1453727737 6ms] dns: cached AAAA www.a.shifen.com. 54 IN AAAA 2408:873d:22:1a91:0:ff:b013:cf81
+0800 2025-03-11 22:47:08 INFO [1453727737 6ms] dns: cached AAAA www.a.shifen.com. 54 IN AAAA 2408:873d:22:18cb:0:ff:b037:e6d8
+0800 2025-03-11 22:47:08 DEBUG [4178135301 252ms] dns: exchanged www.baidu.com NOERROR 21
+0800 2025-03-11 22:47:08 INFO [4178135301 252ms] dns: exchanged CNAME www.baidu.com. 21 IN CNAME www.a.shifen.com.
+0800 2025-03-11 22:47:08 INFO [4178135301 252ms] dns: exchanged A www.a.shifen.com. 21 IN A 153.3.238.127
+0800 2025-03-11 22:47:08 INFO [4178135301 252ms] dns: exchanged A www.a.shifen.com. 21 IN A 153.3.238.28
+0800 2025-03-11 22:47:08 DEBUG router: found reserve mapped domain: www.a.shifen.com
+0800 2025-03-11 22:47:08 DEBUG router: found reserve mapped domain: www.a.shifen.com
+0800 2025-03-11 22:47:08 DEBUG router: found reserve mapped domain: www.a.shifen.com
+0800 2025-03-11 22:47:08 DEBUG router: found reserve mapped domain: www.a.shifen.com
+0800 2025-03-11 22:47:09 DEBUG router: found reserve mapped domain: www.a.shifen.com
+0800 2025-03-11 22:47:09 DEBUG router: found reserve mapped domain: www.a.shifen.com
+0800 2025-03-11 22:47:09 DEBUG router: found reserve mapped domain: www.a.shifen.com
+0800 2025-03-11 22:47:09 DEBUG router: found reserve mapped domain: www.a.shifen.com


支持我们



完整性要求


    

  •  我保证阅读了文档，了解所有我编写的配置文件项的含义，而不是大量堆砌看似有用的选项或默认值。
    • 

  •  我保证提供了可以在本地重现该问题的服务器、客户端配置文件与流程，而不是一个脱敏的复杂客户端配置文件。
    • 

  •  我保证提供了可用于重现我报告的错误的最简配置，而不是依赖远程服务器、TUN、图形界面客户端或者其他闭源软件。
    • 

  •  我保证提供了完整的配置文件与日志，而不是出于对自身智力的自信而仅提供了部分认为有用的部分。
    • 


      		
    

      
  





        



            
            

              
            

        

      


      
    








      

    



      

  
      



  

  @oppressor1761





  


    

      

  

    

        
    
    

  


      
          
  
      
            Copy link

  

      
    

  


  

      



      

  Author


  


  

    

  





      


        


  
    

      
          
related to GrapheneOS/os-issue-tracker#4287

      		
    

  





        


            

            
            

              
            

        

      


      

            
  
  

    
  
    
    

  

  

  


    












      

  
      



  

  @oppressor1761





  


    

      

  

    

        
    
    

  


      
          
  
      
            Copy link

  

      
    

  


  

      



      

  Author


  


  

    

      

      
            oppressor1761
  

      

      

      commented


        Mar 17, 2025


      
  •

  

    
      

        
          edited
          
        
        
      

    
    
      
  
        
      Loading


  
    
  



    


  





      


        


  
    

      
          
此问题为SFA独有(视频1)，其他VPN应用(如 Proton VPN，视频2)没有该问题。



  
    
    signal-2025-03-17-152548.mp4
    
  

  





  
    
    signal-2025-03-17-154409.mp4
    
  

  



      		
    

  





        


            

            
            

              
            

        

      


      

            
  
  

    
  
    
    

  

  

  


    












      

  
      



  

  @oppressor1761





  


    

      

  

    

        
    
    

  


      
          
  
      
            Copy link

  

      
    

  


  

      



      

  Author


  


  

    

  





      


        


  
    

      
          
stack换成gvisor后此bug消失

      		
    

  





        


            

            
            

              
            

        

      


      

            
  
  

    
  
    
    

  

  

  


    












      

  
            

    







      

  
      



  

  @oppressor1761





  


    

      

  

    

        
    
    

  


      
          
  
      
            Copy link

  

      
    

  


  

      



      

  Author


  


  

    

      

      
            oppressor1761
  

      

      

      commented


        Mar 21, 2025


      
  •

  

    
      

        
          edited
          
        
        
      

    
    
      
  
        
      Loading


  
    
  



    


  





      


        


  
    

      
          
无法确认这是不是SFA的问题，所以重新打开此issue。

经过更全面的测试，发现：

主空间使用mixed 和 system时有此bug，使用gvisor没有问题。与私密空间使用哪个栈无关。

此bug与屏蔽未使用VPN的所有连接无关，也与始终开启的VPN无关。即使这两个选项均关闭，也可以复现该bug.

      		
    

  





        


            

            
            

              
            

        

      


      

            
  
  

    
  
    
    

  

  

  


    












      

  
            

    

      
    

    


      

          @oppressor1761
oppressor1761




        reopened this

      Mar 21, 2025

    

  



    

    

      
    

    


      

          @oppressor1761
oppressor1761




        changed the title
私密空间关闭导致SFA断网

mixed栈，私密空间关闭导致SFA断网


      Mar 21, 2025

    

  








      

  
      



  

  @github-actions

    
      GitHub Actions
    




  


    

      

  

    

        
    
    

  


      
          
  
      
            Copy link

  

      
    

  


  

      



      

  


  

    

  





      


        


  
    

      
          
This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 5 days

      		
    

  





        


            

            
            

              
            

        

      


      

            
  
  

    
  
    
    

  

  

  


    












      

  
            

    

      
    

    


      

          @github-actions
github-actions
bot



          added
  the 

  Stale

 label


      May 21, 2025

    

  



    

    

      
    

    


      

          @github-actions
github-actions
bot



            closed this as not planned
    Won't fix, can't repro, duplicate, stale


      May 26, 2025

    

  


    











  
  

    

      

  





  




  
  

              

  
    Sign up for free
    to join this conversation on GitHub.
    Already have an account?
    Sign in to comment


  



  






  
                  




    

  


      
  

    Assignees
  



        

    No one assigned







      


  


  

    Labels
  



    

      

    Stale









      

  

    

        

    Projects
  


        




    None yet




  



      


  

    
  

    Milestone
  


      No milestone





    
      
          


  

    

      
        

          
    

    Development
  




            
    
No branches or pull requests







      
    

  




      

    

  
      

  

    

      1 participant
    

    

        
          @oppressor1761